All traffic to your server enters through our data-center network in Frankfurt, which has always-on DDoS mitigation: volumetric floods (the "throw terabytes at it" attacks) are filtered before they reach the game server. You do not need to enable anything.
What it cannot do
- Application-level attacks that look like real players (bot joins, chat spam, exploit packets) are not distinguishable from legitimate traffic at the network edge. For Minecraft, a plugin such as an anti-bot or a Velocity proxy with rate limiting is the right tool; for Rust, the built-in queue and
server.maxplayershelp. - Attacks on your players (someone gets their home IP through a voice chat or a leaked screenshot) are outside the server entirely.
During an attack
Players lag or get disconnected for a minute while mitigation ramps up; then it stabilises. If your server stays unreachable for more than a few minutes, open a ticket with the time and what you see in the console. We can move you to a different port, which often ends targeted attacks immediately.